$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft File: F03C1838587677BF6505C46715F42F8B8416F949.mft (raw, json) Hash identifier: 0TPo8ofUots2x8qUvUuGTZUTJGeMCcA3azECHH/IsUA= Subject key identifier: C6:C0:68:5E:2E:25:AD:A8:F0:09:68:68:D1:05:6F:BA:9C:4D:88:0F Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 Certificate issuer: /CN=F03C1838587677BF6505C46715F42F8B8416F949 Certificate serial: 2511FD885C0D3882B99CECD8742153B74EE83023 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft Manifest number: 01EF Signing time: Mon 03 Nov 2025 11:21:47 +0000 Manifest this update: Mon 03 Nov 2025 11:16:47 +0000 Manifest next update: Thu 06 Nov 2025 23:14:47 +0000 Files and hashes: 1: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: o1axn6FylL5HDL/+cmxNZgdh+qBhrW0MUa5ofe3vKgY=) 2: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: 5d7eyl15yI3SPHjS9CWQbB/B/JL+7bbkCavXXd21rTk=) 3: F03C1838587677BF6505C46715F42F8B8416F949.crl (hash: 6oGUxVjzY4K/eLm8zU0L7AzfGJTfO4eycoUrs04qpXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:11:fd:88:5c:0d:38:82:b9:9c:ec:d8:74:21:53:b7:4e:e8:30:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949 Validity Not Before: Nov 3 11:16:47 2025 GMT Not After : Nov 6 23:14:47 2025 GMT Subject: CN=C6C0685E2E25ADA8F0096868D1056FBA9C4D880F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a2:ed:da:c4:2d:29:a6:ad:ef:e8:a0:2f:f1: a4:5a:1e:cd:a0:00:65:d6:56:cc:12:b6:37:9d:c7: 91:04:90:42:0e:69:e7:c5:b3:8b:98:21:8b:06:97: d6:02:41:b8:78:9d:2b:cd:d5:b5:13:2a:c5:90:51: 56:20:ba:9e:c6:a8:b0:9d:c2:6d:1a:45:61:b8:ee: a0:14:42:2a:17:d7:f7:59:53:9b:73:8d:78:8e:32: 32:54:31:58:80:b3:25:c1:1c:c9:6e:d9:ae:31:ff: da:57:54:99:77:a2:e5:47:b4:cb:bc:72:b7:a0:ff: 09:2c:cb:8e:87:83:b4:0b:c8:d0:47:8d:d4:f5:f8: eb:ce:97:53:11:01:21:37:2a:c5:02:34:c7:d3:03: 86:e4:af:6d:5c:14:ab:10:c5:0d:29:bf:3c:a8:b1: 99:86:aa:55:1d:20:80:0a:a0:57:01:81:36:19:99: fb:bd:23:ad:7e:e5:fe:bb:ca:74:52:12:03:a6:e3: 77:dc:f4:db:03:fa:e9:2f:e1:bc:8b:57:d3:ac:10: 14:ea:9e:c7:9b:54:56:c2:19:06:fe:88:03:2f:72: e5:1b:7f:8d:1d:15:ea:31:8b:39:5f:55:d6:c1:90: dc:a7:5c:a9:33:a8:c3:f5:31:fb:1e:e2:e1:f1:82: c6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C0:68:5E:2E:25:AD:A8:F0:09:68:68:D1:05:6F:BA:9C:4D:88:0F X509v3 Authority Key Identifier: keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ec:8e:60:44:2a:d0:be:8f:0f:cc:32:41:b6:24:a4:66:27: 3a:a1:40:43:8c:10:6e:19:98:57:4c:a3:99:d4:ce:3d:ec:9c: 8e:d4:16:ac:bf:50:bc:00:c2:85:ce:f9:be:f2:07:78:03:2e: 8f:76:ca:6d:f2:78:b5:68:65:98:b0:93:bf:2d:07:b7:dd:05: 22:80:02:5b:88:5b:9f:26:69:61:ed:3e:a9:d5:34:f4:2f:c2: 38:22:b8:17:f5:81:88:d2:90:96:dd:d2:e4:2e:95:08:a2:d6: a0:24:93:a2:2d:cd:05:8b:10:42:0c:95:bf:7a:d1:83:b2:dd: 1f:88:eb:56:c2:75:02:28:3c:4f:f6:97:8b:24:47:ea:0b:4e: 4d:19:9f:e7:24:3b:d4:d5:48:03:a9:38:7b:77:2e:d5:23:f7: e2:6d:ab:b2:96:02:81:25:68:66:0d:ac:bf:05:3a:e4:a7:c8: 10:bd:c9:76:0f:9e:43:39:c5:55:fd:1f:a2:24:bd:e2:3f:24: fb:39:10:da:ed:35:ee:2e:17:ee:6d:95:2c:8f:cd:59:6e:92: b3:f0:ff:30:71:12:b5:f7:d4:91:e9:de:32:66:57:f7:ec:5c: ff:fd:d5:bd:99:9a:06:5a:93:88:28:6c:c6:7f:56:44:7e:1e: 14:63:e8:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJRH9iFwNOIK5nOzYdCFTt07oMCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4 NDE2Rjk0OTAeFw0yNTExMDMxMTE2NDdaFw0yNTExMDYyMzE0NDdaMDMxMTAvBgNV BAMTKEM2QzA2ODVFMkUyNUFEQThGMDA5Njg2OEQxMDU2RkJBOUM0RDg4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjou3axC0ppq3v6KAv8aRaHs2g AGXWVswStjedx5EEkEIOaefFs4uYIYsGl9YCQbh4nSvN1bUTKsWQUVYgup7GqLCd wm0aRWG47qAUQioX1/dZU5tzjXiOMjJUMViAsyXBHMlu2a4x/9pXVJl3ouVHtMu8 creg/wksy46Hg7QLyNBHjdT1+OvOl1MRASE3KsUCNMfTA4bkr21cFKsQxQ0pvzyo sZmGqlUdIIAKoFcBgTYZmfu9I61+5f67ynRSEgOm43fc9NsD+ukv4byLV9OsEBTq nsebVFbCGQb+iAMvcuUbf40dFeoxizlfVdbBkNynXKkzqMP1Mfse4uHxgsavAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxsBoXi4lrajwCWho0QVvupxNiA8wHwYDVR0j BBgwFoAU8DwYOFh2d79lBcRnFfQvi4QW+UkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmQzZGQ3OS04NjM1LTQ4NTctOGEzYy05ODU5NTQ1MTZmOWUvMC9GMDNDMTgzODU4 NzY3N0JGNjUwNUM0NjcxNUY0MkY4Qjg0MTZGOTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4NDE2 Rjk0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJG OEI4NDE2Rjk0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3sjmBEKtC+jw/MMkG2JKRmJzqhQEOMEG4Z mFdMo5nUzj3snI7UFqy/ULwAwoXO+b7yB3gDLo92ym3yeLVoZZiwk78tB7fdBSKA AluIW58maWHtPqnVNPQvwjgiuBf1gYjSkJbd0uQulQii1qAkk6ItzQWLEEIMlb96 0YOy3R+I61bCdQIoPE/2l4skR+oLTk0Zn+ckO9TVSAOpOHt3LtUj9+Jtq7KWAoEl aGYNrL8FOuSnyBC9yXYPnkM5xVX9H6IkveI/JPs5ENrtNe4uF+5tlSyPzVlukrPw /zBxErX31JHp3jJmV/fsXP/91b2ZmgZak4gobMZ/VkR+HhRj6DI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:18:43 2025 by rpki-client